Add MAC Firewall Policies

MAC firewall policies determine how the device manages traffic based on source and destination IP addresses, and the actions (permit or deny) the device can take. When the policy contains multiple rules, the order of the rules affects how they are applied. Use this task to create a new rule.

Use the following procedure to add MAC firewall policy objects and rules.

Go to Configure > Common Objects > Security > MAC Firewall Policies.
Select an existing IP firewall policy and then select , or select .
Enter a Name for the new policy.
Enter an optional Description.
Select to add a new rule.
For Source MAC, select Any, an existing MAC OUI or the plus sign.
If you choose to add a new Source MAC, select MAC Address or MAC OUI and perform the following:
1. Enter a new name.
2. Enter the MAC Address or MAC OUI.
For Destination MAC, select ANY, an existing MAC OUI or the plus sign.
If you choose to add a new Source MAC, select MAC Address or MA OUI and do the following:
1. Enter a new name.
2. Enter the MAC Address or MAC OUI.
Select the action the device performs when it receives traffic matching the source address-destination address-service.
The firewall can perform the following actions:
- Permit: Allows traffic to traverse its firewall.
- Deny: Blocks traffic from traversing its firewall.
Choose one of the following logging options from the drop-down list:
- Off: Disable logging for packets and sessions that match the MAC firewall policy rule.
- Session Initiation: Log session details about a session created after passing a MAC firewall policy lookup.
- Session Termination: Log session details about a session matching a MAC firewall policy termination.
- Both: Log session details after initiating and terminating a session.
Select Save.

As you continue to add rules to a policy, each new rule is positioned at the bottom of the list. Use the up and down arrows in the rules table to rearrange the position of rules to determine their application order.